PT-2023-7073 · Elastic · Apm Server+3

Published

2023-10-25

·

Updated

2024-02-15

·

CVE-2023-31421

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Beats (affected versions not specified) Elastic Agent (affected versions not specified) APM Server (affected versions not specified) Fleet Server (affected versions not specified)
Description The issue is related to errors in the TLS certificate authentication procedure. When acting as TLS clients, the software does not verify whether the server certificate is valid for the target IP address, although certificate signature validation is still performed. Specifically, when the client is configured to connect to an IP address instead of a hostname, it does not validate the server certificate's IP SAN values against that IP address, resulting in failed certificate validation and unblocked connections as expected. This allows a remote attacker to establish a connection with an invalid server certificate.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2023-08099
CVE-2023-31421

Affected Products

Apm Server
Beats
Agent
Fleet Server